1085 matches found
RunCMS 1.6 - Local File Inclusion
RunCMS 1.6 - Local File Inclusion WwW.BugReport.ir AmnPardaz Security Research & Penetration Testing Group Title: RunCms Multiple Vulnerabilities Vendor: http://www.runcms.org/ Bugs: Local File Inclusion, Modules Authorization Weakness Vulnerable Version: RunCMS 1.6 Halloween, 1.5.x prior version...
Mandrake Linux Security Advisory : libpng (MDKSA-2007:217)
Multiple vulnerabilities were discovered in libpng : An off-by-one error when handling ICC profile chunks in the pngsetiCCP function CVE-2007-5266; only affects Mandriva Linux 2008.0. George Cook and Jeff Phillips reported several errors in pngrtran.c, such as the use of logical instead of bitwis...
Guidance EnCase fails to detect more than 25 partitions
Overview Guidance Software's EnCase Forensic can only detect the first 25 partitions on a volume. Description Guidance Software's EnCase Forensic is a tool that allows an investigator to acquire and analyze a disk image. EnCase names partitions either c: through z:, with an additional partition...
libpng: Multiple Denials of Service
Background libpng is a free ANSI C library used to process and manipulate PNG images. Description An off-by-one error when handling ICC profile chunks in the pngsetiCCP function was discovered CVE-2007-5266. George Cook and Jeff Phillips reported several errors in pngrtran.c, the use of logical...
FreeBSD : png -- multiple vulnerabilities (172acf78-780c-11dc-b3f4-0016179b2dd5)
A Secunia Advisory reports : Some vulnerabilities have been reported in libpng, which can be exploited by malicious people to cause a DoS Denial of Service. Certain errors within libpng, including a logical NOT instead of a bitwise NOT in pngtrtran.c, an error in the 16bit cheap transparency...
CVE-2007-5268
pngrtran.c in libpng before 1.0.29 and 1.2.x before 1.2.21 use 1 logical instead of bitwise operations and 2 incorrect comparisons, which might allow remote attackers to cause a denial of service crash via a crafted PNG image...
CVE-2007-5268
CVE-2007-5268 affects libpng up to versions that include pngrtran.c with use of logical instead of bitwise operations and incorrect comparisons, which can cause a denial of service (crash) via a crafted PNG. The connected Nessus patches show Solaris 10 (SunOS 5.10) libpng patches (137080-07/09 fo...
CVE-2007-4228
rmpvc on IBM AIX 4.3 allows local users to cause a denial of service system crash via long port logical name -l argument...
GLSA-200705-15 : Samba: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200705-15 Samba: Multiple vulnerabilities Samba contains a logical error in the smbd daemon when translating local SID to user names CVE-2007-2444. Furthermore, Samba contains several bugs when parsing NDR encoded RPC parameters...
Logical Drive Insecure Filesystem Enumeration (WMI)
Binary data wmintfsdrives.nbin...
Host Logical Network Segregation Weakness
The remote host is on a different logical network than the Nessus scanner. However, it is on the same physical subnet. An attacker connecting from the same network as your Nessus scanner could reconfigure his system to force it to belong to the subnet of the remote host. This may allow an attacke...
Unauthorized SmartLine DeviceLock disk access
In specific configuration local user can access content of any logical drive...
CVE-2006-1647
An unspecified "logical programming mistake" in SMART SynchronEyes Student and Teacher 6.0, and possibly earlier versions, allows remote attackers to cause a denial of service via a large packet to the Teacher discovery port UDP port 5496, which causes a thread to terminate and prevents...
CVE-2006-1647
An unspecified "logical programming mistake" in SMART SynchronEyes Student and Teacher 6.0, and possibly earlier versions, allows remote attackers to cause a denial of service via a large packet to the Teacher discovery port UDP port 5496, which causes a thread to terminate and prevents...
Buffer overflow
Nokia N70 cell phone allows remote attackers to cause a denial of service reboot or shutdown through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol L2CAP packet whose length field is less than the actual length of the packet, possibly triggering a...
Buffer overflow
Buffer overflow in Sony Ericsson K600i, V600i, W800i, and T68i cell phone allows remote attackers to cause a denial of service reboot or shutdown through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol L2CAP packet whose length field is less than the...
CVE-2005-3438
Multiple unspecified vulnerabilities in Oracle Database Server 9i up to 10.1.0.4.2 have unknown impact and attack vectors, aka Oracle Vuln 1 DB04 in Change Data Capture; 2 DB06 in Data Guard Logical Standby; 3 DB10 in Locale; 4 DB12 in Materialized Views; 5 DB13 in Objects Extension; 6 DB15 in...
Hitachi Cosminexus logical bug
For HTTP POST request with empty body data from previous POST request is used...
U disk thieves the DIY-bug warning-the black bar safety net
See an issue of hacker line of Defense on the on the description write“U disk thieves”that steal U disk all files of the program in the article, anyway also nothing to do, himself wrote one. Below is a used VC++plus MFC to write, I use C API to write, and the name is“U disk thief”, otherwise how...
